^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ postfix/cleanup\[[0-9]+\]: [0-9A-F]+: message-id=[^ ]+$
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ postfix/cleanup\[[0-9]+\]: [0-9A-F]+: reject: body .*: Message content rejected$
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ postfix/local\[[0-9]+\]: [0-9A-F]+: to=.+, relay=local, delay=[0-9]+, status=sent \("|/usr/bin/procmail -a $DOMAIN -d $LOGNAME"\)$
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ postfix/master\[[0-9]+\]: reload configuration$
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ postfix/pickup\[[0-9]+\]: [0-9A-F]+: uid=[0-9]+ from=[^ ]+$
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ postfix/pipe\[[0-9]+\]: [0-9A-F]+: to=.+, relay=filter, delay=[0-9]+, status=sent \(dummy\)$
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ postfix/postfix-script: refreshing the Postfix mail system
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ postfix/qmgr\[[0-9]+\]: [0-9A-F]+: from=.+, size=[0-9]+, nrcpt=[0-9]+ \(queue active\)$
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ postfix/qmgr\[[0-9]+\]: [0-9A-F]+: from=.+, status=expired, returned to sender$
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ postfix/smtp\[[0-9]+\]: [0-9A-F]+: to=.+, relay=.+, delay=[0-9]+, status=bounced \((Name service error for .+: Host not found|host .+ said: 550 5\.1\.1 .+\.\.\. User unknown)\)$
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ postfix/smtp\[[0-9]+\]: [0-9A-F]+: to=.+, relay=.+, delay=[0-9]+, status=deferred \((connect to .+: Connection timed out|lost connection with .+ while sending message body)\)$
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ postfix/smtp\[[0-9]+\]: [0-9A-F]+: to=.+, relay=.+, delay=[0-9]+, status=sent \(250 .+\)$
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ postfix/smtp\[[0-9]+\]: connect to .+: Connection timed out \(port 25\)$
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ postfix/smtpd\[[0-9]+\]: [0-9A-F]+: client=[^ ]+$
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ postfix/smtpd\[[0-9]+\]: connect from [^ ]+$
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ postfix/smtpd\[[0-9]+\]: disconnect from [^ ]+$
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ postfix/smtpd\[[0-9]+\]: reject: RCPT from .+: 554 .+: Recipient address rejected: Relay access denied; from=.+ to=.+
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ postfix: Adjusting environment for postfix: succeeded$
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ postfix: Reloading postfix configuration: succeeded$
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ postfix/smtp\[[0-9]+\]: connect to .+\[[0-9\.]+\]: Connection refused \(port 25\)$
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ postfix/smtp\[[0-9]+\]: [0-9A-F]+: to=<.+>, relay=.+, delay=.+, status=deferred \(connect to .+\[[0-9\.]+\]: Connection refused\)$
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ postfix/cleanup\[[0-9]+\]: [0-9A-F]+: to=<.+>, relay=cleanup, delay=1, status=bounced \(Message content rejected\)$
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ postfix/smtpd\[[0-9]+\]: (timeout|lost connection) after (DATA|CONNECT|RCPT) from .+\[[0-9\.]+\]$
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ postfix/qmgr\[[0-9]+\]: [0-9A-F]+: skipped, still being delivered
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ postfix/smtpd\[[0-9]+\]: reject: RCPT from .+\[[0-9.]+\]: 554 Service unavailable; \[[0-9.]+\] blocked using .+, reason: .+; from=<.+> to=<.+>
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ postfix/smtpd\[[0-9]+\]: warning: [0-9.]+: (hostname .+ verification failed: Host not found|address not listed for hostname) .+$
^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ postfix/smtpd\[[0-9]+\]: warning: .+: RBL lookup error: Name service error for .+: Host not found, try again$
#### ^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ postfix/local\[[0-9]+\]: 87B0E1B601: to=<DrWeb-DAEMON@websrv.ucvt.ru>, relay=local, delay=0, status=bounced (unknown user: "drweb-daemon")
#### ^.{3} [ 0-9][0-9] [0-9]{2}:[0-9]{2}:[0-9]{2} .+ postfix/smtpd\[[0-9]+\]: warning: unknown[211.185.3.194] sent message header instead of SMTP command: From: <tyranosaurusatavv307@earthlink.net>
